Legal

Privacy Policy

Privacy Policy

Effective date: 20. 2. 2026

Last updated: 20. 2. 2026

This Privacy Policy explains how Treavio ("Treavio", "we", "our", "us") collects, uses, stores, and shares personal data when you use our website and related services, in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Czech data protection law (Act No. 110/2019 Coll.).

1. Controller and contact

Service name: Treavio.
Data protection contact: privacy@treavio.com.
Legal inquiries: info@treavio.com.

2. Data we collect

Depending on how you use Treavio, we process:

  • Account data you provide directly – email address, display name.
  • Google Sign-In data – Google account ID, email, profile name, and avatar URL (only email and profile scopes).
  • Newsletter subscription data – email address, IP address, GDPR consent timestamp.
  • Technical and security data – IP address, browser type, session identifiers, and basic server logs.
  • App usage data needed to operate core features (e.g. saved places and notes you create).

3. Purposes of processing

We use personal data for the following purposes:

  • User authentication and account management.
  • Providing and maintaining core app functionality.
  • Protecting the service from abuse, fraud, and unauthorized access.
  • Complying with legal obligations and enforcing our terms.

4. Legal basis for processing (Art. 6 GDPR)

We process personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR): Newsletter subscription, optional features requiring consent. You can withdraw consent at any time.
  • Performance of a contract (Art. 6(1)(b) GDPR): Account registration and management, providing core service functionality.
  • Legitimate interest (Art. 6(1)(f) GDPR): Service security, abuse prevention, basic analytics for service improvement.
  • Legal obligation (Art. 6(1)(c) GDPR): Fulfilling obligations under Czech and EU law.

5. Google OAuth and Google user data

Treavio requests only these Google OAuth scopes: email and profile. We use this data solely for sign-in and account creation/linking.

Treavio does not sell Google user data and does not use it for advertising purposes.

You can revoke Treavio's access to your Google account at: myaccount.google.com/permissions.

6. Data sharing

We do not sell personal data. We may share data only with:

  • Service providers needed to host, secure, and operate Treavio (under contractual safeguards).
  • Public authorities if required by law.
  • Successors in case of merger, acquisition, or asset transfer (with notice where required).

7. Data retention

We keep personal data only as long as needed for account operation, security, legal compliance, and dispute resolution. When data is no longer needed, we delete or anonymize it.

8. Your rights

Under GDPR and Czech legislation, you have the following rights:

  • Right of access to personal data (Art. 15 GDPR).
  • Right to rectification of inaccurate data (Art. 16 GDPR).
  • Right to erasure – "right to be forgotten" (Art. 17 GDPR).
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to object to processing (Art. 21 GDPR).

To exercise your rights, contact us at privacy@treavio.com. We will respond without undue delay, within 30 days at the latest.

You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

9. Security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

10. Children's privacy

Treavio is not directed to children under 16, and we do not knowingly collect personal data from children. If we learn that we have processed data from a child under 16, we will delete it promptly.

11. Cookies

Treavio uses only essential technical cookies to ensure service functionality (authentication, sessions). We do not use any tracking or advertising cookies without your explicit consent.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be published on this page with a new effective date. Continued use of the service after changes are posted constitutes acceptance of the updated terms.

If you have questions, contact us at privacy@treavio.com.